build: Justfile experiment

.github/workflows/continuous-delivery.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Setup Nix.
         uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Publish binary.
-        run: nix develop -c make publish-binary RELEASE="${GITHUB_REF_NAME}"
+        run: nix develop -c just publish-binary "${GITHUB_REF_NAME}"
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by GitHub Actions.
 
@@ -35,7 +35,7 @@ jobs:
       - name: Setup Nix.
         uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Publish crate.
-        run: nix develop -c make publish-crate
+        run: nix develop -c just publish-crate
         env:
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
 
@@ -57,6 +57,8 @@ jobs:
     steps:
       - name: Checkout code.
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Setup Nix.
+        uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
       - name: Login to GitHub Container Registry
@@ -66,7 +68,7 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Publish Docker Image
-        run: make publish-docker-image RELEASE="${GITHUB_REF_NAME}" PLATFORM="${{ matrix.platform }}" TARGET="${{ matrix.target }}" SUFFIX="${{ matrix.suffix }}"
+        run: nix develop -c just publish-docker-image "${GITHUB_REF_NAME}" "${{ matrix.platform }}" "${{ matrix.target }}" "${{ matrix.suffix }}"
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
@@ -77,6 +79,8 @@ jobs:
     steps:
       - name: Checkout code.
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Setup Nix.
+        uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
       - name: Login to GitHub Container Registry
@@ -86,4 +90,4 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Publish Docker Manifest
-        run: make publish-docker-manifest RELEASE="${GITHUB_REF_NAME}"
+        run: nix develop -c just publish-docker-manifest "${GITHUB_REF_NAME}"

.github/workflows/continuous-integration.yml

@@ -16,8 +16,10 @@ jobs:
     steps:
       - name: Checkout code.
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Setup Nix.
+        uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Check permissions.
-        run: make check-${{ matrix.language }}-permissions
+        run: nix develop -c just check-${{ matrix.language }}-permissions
 
   formatting:
     name: Formatting
@@ -32,7 +34,7 @@ jobs:
       - name: Setup Nix.
         uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Check formatting.
-        run: nix develop -c make check-${{ matrix.language }}-formatting
+        run: nix develop -c just check-${{ matrix.language }}-formatting
 
   linting:
     name: Linting
@@ -47,7 +49,7 @@ jobs:
       - name: Setup Nix.
         uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Check linting.
-        run: nix develop -c make check-${{ matrix.language }}-linting
+        run: nix develop -c just check-${{ matrix.language }}-linting
 
   dependencies:
     name: Dependencies
@@ -62,7 +64,7 @@ jobs:
       - name: Setup Nix.
         uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Check dependencies.
-        run: nix develop -c make check-${{ matrix.language }}-dependencies
+        run: nix develop -c just check-${{ matrix.language }}-dependencies
 
   compile:
     name: Compile
@@ -76,7 +78,7 @@ jobs:
       - name: Setup Nix.
         uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Compile.
-        run: nix develop -c make compile
+        run: nix develop -c just compile
 
   unit-test:
     name: Unit Test
@@ -90,7 +92,7 @@ jobs:
       - name: Setup Nix.
         uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Unit test.
-        run: nix develop -c make unit-test
+        run: nix develop -c just unit-test
 
   end-to-end-test:
     name: End to End Test
@@ -104,4 +106,4 @@ jobs:
       - name: Setup Nix.
         uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: End to End test.
-        run: nix develop -c make end-to-end-test
+        run: nix develop -c just end-to-end-test

.github/workflows/dogfood.yml

@@ -21,4 +21,4 @@ jobs:
       - name: Setup Nix.
         uses: cachix/install-nix-action@4e002c8ec80594ecd40e759629461e26c8abed15 # v31.9.0
       - name: Dogfooding Docker.
-        run: nix develop -c make dogfood-docker FROM="origin/${{ github.base_ref }}"
+        run: nix develop -c just dogfood-docker "origin/${{ github.base_ref }}"

.github/workflows/github-actions-workflows.yml

@@ -18,7 +18,7 @@ jobs:
       - name: Setup Nix.
         uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Check formatting.
-        run: nix develop -c make check-yaml-formatting
+        run: nix develop -c just check-yaml-formatting
 
   linting:
     name: Linting
@@ -32,4 +32,4 @@ jobs:
       - name: Setup Nix.
         uses: cachix/install-nix-action@19effe9fe722874e6d46dd7182e4b8b7a43c4a99 # v31.10.0
       - name: Check GitHub Actions workflows linting.
-        run: nix develop -c make check-github-actions-workflows-linting
+        run: nix develop -c just check-github-actions-workflows-linting

flake.nix

@@ -38,6 +38,8 @@
           hardeningDisable = [ "all" ];
 
           buildInputs = [
+            # Task runner.
+            pkgs.just
             # Rust with cross-compilation targets built-in.
             rustWithTargets
             # Shell formatting.

justfile

@@ -0,0 +1,89 @@
+# Auto-detect musl target for static binaries.
+# Only set MUSL_TARGET on supported architectures; targets that need it will check.
+MUSL_TARGET := `case "$(uname -m)" in x86_64) printf '%s' x86_64-unknown-linux-musl ;; aarch64) printf '%s' aarch64-unknown-linux-musl ;; *) printf '%s' '' ;; esac`
+
+# Use --locked in CI to ensure reproducible builds.
+CARGO_LOCKED := if env("CI", "") != "" { "--locked" } else { "" }
+
+default: compile
+
+check-shell-permissions:
+    ./ci/check-scripts-permissions.sh
+
+check-rust-formatting:
+    cargo fmt --all -- --check --config=group_imports=StdExternalCrate
+
+fix-rust-formatting:
+    cargo fmt --all -- --config=group_imports=StdExternalCrate
+
+check-shell-formatting:
+    shfmt --simplify --diff ci/*
+
+fix-shell-formatting:
+    shfmt --simplify --write ci/*
+
+check-python-formatting:
+    autopep8 --exit-code --diff --aggressive --aggressive --max-line-length 120 --recursive end-to-end-tests/
+
+fix-python-formatting:
+    autopep8 --in-place --aggressive --aggressive --max-line-length 120 --recursive end-to-end-tests/
+
+check-yaml-formatting:
+    yamlfmt -verbose -lint -dstar .github/workflows/*
+
+fix-yaml-formatting:
+    yamlfmt -verbose -dstar .github/workflows/*
+
+check-rust-linting:
+    cargo clippy --verbose {{ CARGO_LOCKED }} -- -D warnings
+
+check-shell-linting:
+    shellcheck ci/*.sh
+
+check-python-linting:
+    ruff check --line-length 120 end-to-end-tests/
+
+fix-python-linting:
+    ruff check --fix --line-length 120 end-to-end-tests/
+
+check-github-actions-workflows-linting:
+    actionlint -verbose -color
+
+check-rust-dependencies:
+    cargo machete
+
+compile:
+    cargo build --verbose {{ CARGO_LOCKED }}
+
+unit-test:
+    cargo test --verbose {{ CARGO_LOCKED }}
+
+end-to-end-test: compile
+    cd end-to-end-tests/ && behave
+
+release:
+    test -n "{{ MUSL_TARGET }}" || (printf '%s\n' "Unsupported architecture: $(uname -m)." >&2; exit 1)
+    cargo build --release --target={{ MUSL_TARGET }} --locked --verbose
+
+publish-binary RELEASE: release
+    ./ci/publish-binary.sh {{ RELEASE }} {{ MUSL_TARGET }}
+
+publish-crate:
+    cargo publish --verbose
+
+dogfood-docker FROM: release
+    docker build --build-arg TARGET={{ MUSL_TARGET }} --tag clean_git_history --file Dockerfile .
+    # Emulate GitHub Actions CI environment via environment variables for testing.
+    docker run --rm \
+        --volume {{ justfile_directory() }}:/workspace \
+        --workdir /workspace \
+        --env HOME=/github/home \
+        --env GITHUB_ACTIONS=true \
+        --env CI=true \
+        clean_git_history --verbose {{ FROM }}
+
+publish-docker-image RELEASE PLATFORM TARGET SUFFIX:
+    ./ci/publish-docker-image.sh {{ RELEASE }} {{ PLATFORM }} {{ TARGET }} {{ SUFFIX }}
+
+publish-docker-manifest RELEASE:
+    ./ci/publish-docker-manifest.sh {{ RELEASE }}